UbiquitousOS
/
OpenCloudOS-Kernel
mirror of https://gitee.com/OpenCloudOS/OpenCloudOS-Kernel.git
11
0
Fork 0
Code Issues Projects Releases Wiki Activity

ppp: allow usage in namespaces 

Check for CAP_NET_ADMIN with ns_capable() instead of capable()
to allow usage of ppp in user namespace other than the init one.

Signed-off-by: Matteo Croce <mcroce@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Matteo Croce 2017-10-27 20:08:23 +02:00 committed by David S. Miller
parent 87e3de1e4e
commit 90e229ef61
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/net/ppp/ppp_generic.c
View File

@ -390,7 +390,7 @@ static int ppp_open(struct inode *inode, struct file *file)
/* /*
* This could (should?) be enforced by the permissions on /dev/ppp. * This could (should?) be enforced by the permissions on /dev/ppp.
*/ */
if (!capable(CAP_NET_ADMIN)) if (!ns_capable(file->f_cred->user_ns, CAP_NET_ADMIN))
return -EPERM; return -EPERM;
return 0; return 0;
} }